Siemens Simcenter Femap Memory Corruption Vulnerability in Datakit Library Allowing Remote Code Execution

A memory corruption vulnerability has been identified in Siemens Simcenter Femap, all versions prior to V2512.0003, while parsing specially crafted IPT files. This vulnerability could allow an attacker to execute code in the context of the current process. The issue arises from a heap-based buffer overflow in the Datakit library, which could be exploited if a user is tricked into opening a malicious IPT file with the affected application.

Impact

Exploitation of this vulnerability could lead to a heap-based buffer overflow, allowing for remote code execution in the context of the current process.

Remediation

Siemens has released a new version for Simcenter Femap. Users are advised to update to V2512.0003 or later. For more information, visit the Siemens Support page for Simcenter Femap.